SSL 安全网站从第三方 Web 服务提取内容 - 我们需要在两者上使用 SSL
假设我们有一个 SSL 安全域 - https://xyz.com 并且我们正在从第三方服务中提取内容。它们设置在 service.xyz.com 上（不安全），
因此，由于 PII 问题，该页面存在问题。
显然，这两个 URL 位于完全不同的 IP 地址上。我是 SSL 新手，不太确定如何解决这个问题。我们应该在这里使用两个证书还是可以配置一个证书来包含两个 IP？
Lets say we have an SSL secured domain - https://xyz.com and we are pulling content from a third party service. They are set up on service.xyz.com (unsecured)
As a result the page is an issue due to PII concerns.
Obviously, the two urls are on completely different IP addresses. I'm new at working with SSL and not quite sure how to approach this. Should we use two certificates here or is it possible to configure one cert to encompass both IPs?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
您可以购买两个证书，也可以购买一个在验证中包含多个域的证书。后者称为 SAN（或 subjectAlternativeName）证书。您可以从许多 CA 购买这些证书。
鉴于您声明 service.xyz.com 是第三方服务（...您控制网络服务器？），通常认为最佳实践是为两个站点获取两个证书，而不是拥有一个证书（使用单个私钥）。
You can either buy two certificates or get one with multiple domains included in the validation. The latter are called SAN (or subjectAlternativeName) certificates. You can buy these certificates from many CAs.
Given that you state that service.xyz.com is a third party service (...that you control the webserver for?), it would generally be considered best practice to obtain two certificates for the two sites, rather than having one certificate (with a single private key).